Legal

Privacy Policy

Last updated: 27 April 2026

Sutra Retreats LLC ("we", "us", "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store and protect information about you when you visit sutraretreats.com or contact us directly.

We operate in accordance with the UK General Data Protection Regulation (UK GDPR) and the EU General Data Protection Regulation (EU GDPR), where applicable.

1. Who We Are

Sutra Retreats LLC is a boutique corporate retreat planning company, registered in Delaware, USA, operating across Europe and the UK. Sutra Retreats LLC is the data controller responsible for your personal data. You can contact us at:

Sutra Retreats LLC
Email: lindsay@sutraretreats.com

2. What Data We Collect

We may collect the following types of personal data:

• Contact information: your name, email address, phone number, and company name — provided when you submit an enquiry via our contact form.
• Communication data: messages and correspondence you send us via email, WhatsApp, or our contact form.
• Marketing preferences: whether you have opted in to receive our newsletter or marketing communications.
• Usage data: information about how you use our website, including pages visited, time spent, and referring URLs (collected via cookies — see our Cookie Policy).

3. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your enquiry and provide you with information about our retreat services.
• To send you marketing communications where you have given us consent (e.g. our newsletter via Mailchimp).
• To improve our website and services based on how they are used.
• To comply with legal and regulatory obligations.

4. Legal Basis for Processing

We rely on the following legal bases under UK/EU GDPR:

• Consent: when you submit our contact form or subscribe to our newsletter, you are giving us consent to contact you.
• Legitimate interests: to operate, maintain and improve our business and website.
• Legal obligation: where processing is necessary to comply with a legal or regulatory obligation.

5. How We Store and Protect Your Data

Your data is stored securely using industry-standard measures. We use the following third-party services to process data on our behalf:

• Cloudflare (Workers / D1) — for website hosting, security, and processing contact form submissions. Data is stored in Cloudflare's infrastructure.
• Mailchimp (Intuit Inc.) — for email marketing and newsletter delivery.
• Calendly — for booking discovery calls. Calendly is only loaded after you have given your consent via our cookie banner.

All third-party processors are bound by data processing agreements and comply with applicable data protection legislation.

6. How Long We Keep Your Data

We retain your personal data only for as long as necessary:

• Enquiry data is retained for up to 3 years or until you request deletion.
• Marketing list data is retained until you unsubscribe or request deletion.
• Website usage data (cookies/analytics) is subject to the retention periods in our Cookie Policy.

7. Your Rights

Under UK/EU GDPR, you have the following rights:

• Right to access: request a copy of the personal data we hold about you.
• Right to rectification: request correction of inaccurate or incomplete data.
• Right to erasure: request deletion of your personal data ("right to be forgotten").
• Right to restrict processing: request that we limit how we use your data.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to object: object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at lindsay@sutraretreats.com. We will respond within 30 days.

8. Cookies

We use cookies on our website to improve your experience. Non-essential cookies (including the Calendly booking widget) are only loaded after you give your consent. For full details, please read our Cookie Policy or manage your cookie preferences.

9. Third-Party Links

Our website may contain links to third-party websites (such as Calendly or social media platforms). We are not responsible for the privacy practices of these sites and encourage you to read their privacy policies.

10. International Transfers

Some of our third-party service providers (including Mailchimp and Cloudflare) may process your data outside the UK or EU. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the updated policy on this page with a revised "last updated" date.

12. Contact & Complaints

If you have any questions about this Privacy Policy or how we handle your data, please contact:

If you are unhappy with how we have handled your data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.